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Abstract. The arguments given in this paper suggest that Grover's and 
Shor's algorithms are more closely related than one might at first expect. 
Specifically, we show that Grover's algorithm can be viewed as a quantum al- 
gorithm which solves a non-abelian hidden subgroup problem (HSP). But we 
then go on to show that the standard non-abelian quantum hidden subgroup 
(QHS) algorithm can not find a solution to this particular HSP. 

This leaves open the question as to whether or not there is some mod- 
ification of the standard non-abelian QHS algorithm which is equivalent to 
Grover's algorithm. 
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1. Introduction 



Is Grover's algorithm a quantum hidden subgroup (QHS) algorithm ? 

We do not completely answer this question. Instead, we show that Grover's 
algorithm is a QHS algorithm in the sense that it can be rephrased as a quantum 
algorithm which solves a non-abelian hidden subgroup problem (HSP) on the sym- 
metric group §7v • But we then go on to show that the standard non-abelian QHS 
algorithm cannot solve the Grover HSP. 

This leaves unanswered an intriguing question: 
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Question. Is there an extension or modification of the standard non-ahelian QHS 
on the symmetric group Sn which solves the non-ahelian HSP associated with 
Grover's algorithm? 

It should be mentioned that, because of a result of Zalka [SJ, such an algorithm, 
if it exists, could not be asymptotically faster than Grover's algorithm. 

We hope that the results found in this paper will lead to a better understanding 
of quantum algorithms. 

2. Definition of the hidden subgroup problem (HSP) and hidden 

SUBGROUP ALGORITHMS 

What is a hidden subgroup problem ? What is a hidden subgroup algorithm ? 

Definition 1. A map (p : G — > S from a group G into a set S is said to have 
hidden subgroup structure if there exists a subgroup of G, called a hidden 
subgroup, and an injection L^p : G/K^p — > S, called a hidden injection, such 
that the diagram 

G ^ S 
G/K^ 

is commutative^ , where G/ K^p denotes the collection of right cosets of in G, 
and where v : G — > G/Kp is the natural surjection of G onto G/K^. We refer 
to the group G as the ambient group and to the set S as the target set. If 
is a normal subgroup of G, then = G/K^ is a group, called the hidden 
quotient group, and v : G — > GjK^ is an epimorphism, called the hidden 
epimorphism. We will call the above diagram the hidden subgroup structure 
of the map Lp : G — > S . 

Remark 1. The underlying intuition motivating this formal definition is as follows: 
Given a natural surjection (or epimorphism) v : G — > GjK^p, an "archvillain with 
malice of forethought" hides the algebraic structure of v by intentionally renaming 
all the elements of G/K^, and "tossing in for good measure" some extra elements 
to form a set S and a map Lp : G — > S. 

The hidden subgroup problem can be stated as follows: 

Problem 1 (Hidden Subgroup Problem (HSP)). Given a map 

ifi-.G — >S 

with hidden subgroup structure, determine a hidden subgroup of G. An algo- 
rithm solving this problem is called a hidden subgroup algorithm. We will call 
a map with hidden subgroup structure a hidden subgroup problem (HSP). 

^By saying that this diagram is commutative, we mean = i,^ o u. This concept generaUzes 
in an obvious way to more comphcated diagrams. 
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The corresponding quantum form of this HSP is stated as fohows: 
Problem 2 (Hidden Subgroup Problem: Quantum Version). Let 

be a map with hidden subgroup structure. Construct a quantum implementation of 
the map as follows: 

Let Tic and Tis be Hilbert spaces defined respectively by the orthonormal bases 

{\g)\geG} and {\s)\seS} , 

and let sq = f (1), where 1 denotes the identity of the ambient group G. Finally, 
let be a unitary transformation such that 

U^-.TiG^Hs — > Hg^ Us 

\g)\s,) ^ \9)\^{g)) ' 

Determine the hidden subgroup with bounded probability of error by making 
as few queries as possible of the blackbox Utp. A quantum algorithm solving this 
problem is called a quantum hidden subgroup (QHS) algorithm. 



3. The generic QHS algorithm QRand 

Let ip : G — > S he a map from a group G to a set S with hidden subgroup 
structure. We assume that all representations of G are equivalent to unitary 
representations^. Let G denote a complete set of distinct irreducible unitary 
representations of G. Using multiplicative notation for G, wc let 1 denote the 
identity of G, and let sq denote its image in S. Finally, let 1 denote the trivial 
representation of G. 

Remark 2. If G is abelian, then G becomes the dual group of characters. 
The generic QHS algorithm is given below: 

Quantum Subroutine QRand((^) 

Step 0. Initialization 



|Vo)= l)|so) eWg«)Ws 
Step 1. Application of the inverse Fourier transform of G to the left register 

V l*^! geG 

where |G| denotes the cardinality of the group G. 



This is true for all finite groups as well as a large class of infinite groups. 
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Step 2. Application of the unitary transformation 

Step 3. Application of the Fourier transform J^g of G to the left register 
1^3) = 1^ E 1^1 E ^'•"^^ {^(9)^ 1^(5)) = 1^ E hlTrace ( I7) |$ (V)) ) e Wg^Ws 



where I7I denotes the degree of the representation 7, where 7^ denotes 
the contragradient representation (i.e., 7^(3) — 7 {g~^) = 7(3) )i where 
Trace ( ^ (5) I7) ) = EHi E^i Wh It.,), and where |$ (7I,) ) = E,eG 7,i (s) k (5))- 



Step 4. Measurement of the left quantum register with respect to the orthonormal 
basis 

{ |7«,) ■■l&G,l<i,j<\j\}. 
Thus, with probability 

|G| 

Jij is the measured result, and the quantum system "collapses" to the state 



IV'4) 



Step 5. Output 7ij and stop. 

4. Pushing HSPs for the generic QHS algorithm QRand 

For certain hidden subgroup problems (HSPs) (p : G — > S, the corresponding 
generic QHS algorithm QRand either is not physically implementablc or is too ex- 
pensive to implement physically. For example, the HSP (p is usually not physically 
implementable if the ambient group is infinite (e.g., G is the infinite cyclic group 
Z), and is too expensive to implement if the ambient group is too large (e.g., G 
is the symmetric group Siqioo). In this case, there is a standard generic way of 
"tweaking" the HSP to get around this problem, which we will call pushing. 

Definition 2. Let ip : G — > S be a map from, a group G to a set S. A map 
(fi : G — > S from a group G to the set S is said to be a push of (p, written 

p = Push (p) , 

provided there exists an epimorphism jj, : G — > G from G onto G, and a transversal 
T : G — > G of 1^ such that ip = tpor. 
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If the epimorphism /i and the transversal r are chosen in an appropriate way, 
then execution of the generic QHS subroutine with input = Push{if) , i.e., 
execution of 

QRand {lp) , 

will with high probability produce an irreducible representation 7 of the group G 
which is sufficiently close to an irreducible representation 7 of the group G. If this 
is the case, then there is a polynomial time classical algorithm which upon input 7 
produces the representation 7. 

Obviously, much more can be said about pushing. But unfortunately that 
would take us far afield from the objectives of this paper. For more information 
on pushing, we refer the reader to [23 ■ 



5. Shor's algorithm 



Shor's factoring algorithm is a classic example of a QHS algorithm created from 
the push of an HSP. 

Let N be the integer to be factored. Let Z denote the additive group of integers, 
and denote the monoid of integers under multiplication modulo N (i.e., the 
ring of integers modulo N ignoring addition.) 

Shor's algorithm is a QHS algorithm that solves the following HSP 

Lp : Z — > 

TO I — > a™ mod N 

with unknown hidden subgroup structure given by the following commutative dia- 
gram 

Z ^ N 

Z/PZ 

where a is an integer relatively prime to iV, where P is the hidden integer period of 
the map : Z — > Z^, where PZ is the additive subgroup all integer multiples of 
P (i.e., the hidden subgroup), where v : Z — > Z/PZ is the natural epimorpism of 
of the integers onto the quotient group TLjPTL (i.e., the hidden epimorphism), and 
where l : "L/ PX, — > is the hidden monomorphism. 

An obstacle to creating a physically implementable algorithm for this HSP is 
that the domain Z of is infinite. As observed by Shor, a way to work around 
this difficulty is to push the HSP. 



In particular, as illustrated by the following commutative diagram 



Z ^ 



/i \\ T Z' ip = Push (tp) = ip O T 

Zn 
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1 

- 2P2 



a push (fi — Push {(p) is constructed by selecting the epimorphism n : Z — > Zq of 
Z onto the finite cyclic group Zq of order Q, where the integer Q is the unique 
power of 2 such that N"^ < Q < 27V^, and choosing the transversal^ 

r : Zq Z 
mmodQ I — > m ' 

where < m < Q. This push (p = Push {<p) is called Shor's oracle. 

Shor's algorithm consists in first executing the quantum subroutine QRand(^), 
thereby producing a random character 

ly/Q '■ m mod Q i— > — mod 1 

of the finite cyclic group Zq . The transversal r used in pushing has been engineered 
to assure that the character "fy/Q is sufficiently close to a character 

7d/P : fcmodP ^ ^modl 

of the hidden quotient group Z/PZ = Zp. In this case "sufficiently close" means 
that 

y_ _ 
Q P 

which that d/P is a. continued fraction convergent of y/Q, and thus can be found 
found by the classical polynomial time continued fraction algorithm. 

6. Description of Grover's algorithm 

Now let us turn to Grover's algorithm. We begin with a brief description. 

Consider an unstructured database of A'' = 2" records labeled without repetitions 
with the labels 

0,1,2,. ..,7V-1. 
We are given the oracle / : {0, 1}" — > {0, 1}, where 

r 1 if J = Jo ("Yes") 

m = 

[ otherwise ("No") , 
called Grover's oracle, and asked to solve the following search problem: 

Search Problem for an Unstructured Database. Find the unknown record 
labeled as jo with the minimum amount of computational work, i.e., with the min- 
imum number of queries of the oracle f, and with bounded probability of error. 

Let H be the Hilbert space with orthonormal basis 

|0),|l),|2),...,|iV-l) , 



■'a transversal for an epimorphism : Z > is an injection r^^ : Zq > Z such that 

aip o Tip is the identity map on Zq, i.e., a map that takes each element of Zq onto a coset 
representative of the element in Z . 
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where iV = 2". Then Grovcr's oracle is essentially given as the unitary transfor- 
mation 



'bo> 



H 



1~L 



where 



%,> =^-2bo)Oo| 
is inversion in the hyperplane orthogonal to |jo)- 

Let H denote the Hadamard transform on the Hilbert space Ti. Then Grover's 
algorithm is given as: 



Grover's Algorithm 



STEP 0. 



STEP 1. 



STEP 2. 



(Initialization) 

^10) = ;^ Eli) 



1^) 

k 



3=0 







Loop until k = 



4sm-i(l/\/iV) 

|^)^Q|^) = -/f7|0)/f/u) 
k < — k + l 



Measure IV') with respect to the standard basis 
|0) , |1) , ... ,\N —1) to obtain the unknown 
state I jo) with probability > 1 — 



7. The symmetry hidden within Grover's algorithm 

But where is the hidden symmetry in Grovcr's algorithm ? 

Let Sjv be the symmetric group on the symbols 

0,1,2,3, ...,Ar - 1 . 
Then Grover's algorithm is invariant under the hidden subgroup 

Stabj„ = {g e§N : g (jq) = jo} C Sjv , 

called the stabilizer subgroup for jo, i.e., Grover's algorithm is invariant under 
the group action 

Stabj„ xH — > n 

(.9, J2fjo^ I j)) ' — ' E^Jo^ 0-3 l.9(.?)) 

Moreover, if the hidden subgroup Stahj^ is known, then so is the integer jo, and 
vice versa. 
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Thus, Grover's algorithm is an algorithm that solves the following hidden sub- 
group problem, which we will henceforth refer to as Grover's hidden subgroup 
problem: 



Grover's Hidden Subgroup Problem. Given a map 

from the the symmetric group S^v into a target set S = {0,1,2, N — 1} with 
hidden subgroup structure given by the commutative diagram 

^ S 

where Vj^ : Sjy — > S/Stabj^ is the natural surjection of Sn onto the coset space 
S/Stabjg, and where 

L : E>N S 
{j jo) Stabj^ I — > j 

is the unknown relabeling (bijection) of the coset space SN/Stabjg onto the set 
S. Find the hidden subgroup Stabj^ with bounded probability of error. 



Let (ij) e Sat denote the permutation that interchanges integers i and j, and 
leaves all other integers fixed. Thus, (ij) is a transposition if i ^ j, and the identity 
permutation 1 if i = j. 

Proposition 1. The set 

{(0io),(lio),(2io),...,((iV-l)jo)} 

is a complete set of distinct coset representatives for the hidden subgroup Stabj^ 
ofEiN, i-e., the coset space SN/Stabj^ is given by the following complete set of 
mutually distinct cosets. 

SN/Stabj, = {(Ojo) Stabj,, (Ijo) Stabj„, {2jo) Stabj,,. ..,{{N- 1) jo) StabjJ 
Proof. Since 

(kjo) Stabjg = {£jo) Stabj^ (^Jo)"^ {kjo) G Stabj„ ■^=^ k = l , 
it follows that 



(Oio) Stabj^, (Ijo) Stabj^, (2 jo) Stabj,,. ..,{{N- 1) jo) Stabj, 

are mutually distinct cosets of Stabj^ in Sjv- It now follows from Lagrange's 
theorem that the above collection of mutually distinct cosets is complete. □ 
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8. A COMPARISON OF GrOVER'S AND ShOR'S ALGORITHMS 

Now let us compare Shor's algorithm with Grover's. 

Let S be the set of integers 

5 = {0,l,2,...,iV-l} , 

where A'' = 2", and let jo € S denote the unknown label to be found by Grover's 
algorithm. 

Shor's algorithm solves the HSP ip : Z — > with hidden subgroup structure 

Z ^ 

Z/PZ 

where Z]^ can be thought of as the result of the unknown ("malicious") relabeling 

L-.k + PZi — > a* mod A 

of Z/PZ. 

In like manner, Grover's algorithm solves an HSP, namely, the HSP tp : Sjv — > S 
with hidden subgroup structure 

Jt^ S 
SN/Stabjo 

where 5' = {0, 1, 2, . . . , A — 1} denotes the set resulting from the unknown ("mali- 
cious") relabeling (bijection) 

t : (j jo) Stabj^ i — > j 

of SN/Stabjo- 

For Shor's algorithm, Shor's oracle ^ : Zg — > Z]^ is created by pushing the 
HSP f.Z — using 

Z ^ Z]^^ 

/«\\r , 
Z/QZ 

thereby producing tp = Push{ip) = ipor with the transversal r : fcmodQ i — > k. 

In like manner, for Grover's algorithm, Grover's oracle can be created by pushing 
the HSP : Sjv — > S using 

Sjv ^ 

SN/Stabct 

thereby producing Ip = Push{(p) = (por with the transversal r : (0 j) Stabo i — > Sat 
of the natural surjection /i. 
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Although it is not immediately apparent, the resulting push ip (for jo 7^ 0) is 
actually Grover's oracle relabelled by the injection l : SN/Stabj^ — > S. For 

(p ^ if O T = {i O v) O T = L O [v O t) aud 

{(0 jo) Stabj^ if j = jo 
Stabjg otherwise 
which is informationally the same as Grover's oracle 

r 1 if J = jo 

fU) = \ 

[ otherwise 

Hence, we can conclude that Grover's algorithm is an quantum algorithm very 
much like Shor's algorithm, in that it is a quantum algorithm that solves the Grover 
hidden subgroup problem. 



9. However 



However, ... this appears to be where the similarity between these two algorithms 
ends. For, the standard non-abclian QHS algorithm on Sat for the HSP (p (or ip) 
can not find the hidden subgroup Stabj„ for each of the following two reasons: 



• Since the subgroups Stabj are not normal subgroups of Sat, it follows from 
the work of Hallgren et al TTl that the standard non-abelian hidden sub- 
group algorithm will find the largest normal subgroup of S^r lying in Stabj. 
But unfortunately, the largest normal subgroup of Sat lying in Stabj. is the 
trivial subgroup of Sat . 



• The subgroups Stabo, Stabi, ... , Stabpf-i are mutually conjugate sub- 
groups of Sat- 



We should also mention that this hidden subgroup approach can not possibly 
lead to a quantum algorithm that is faster than Grover's.. For ZalkaJJI] has shown 
that Grover's algorithm is asymptotically optimal. 
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A Comparison of Two Quantum Algorithms 


Shor's Algorithm 


Grover's Algorithm 


Similarities 


Shor's algorithm solves 


Grover's algorithm solves 


an HSP, namely: 


an HSP, namely: 






^\ /i 






EiN / Stabjg 


Pushing using 


Pushing (p using 




Sat ^ S 


produces ip — Push[ip) — o t 
which is Shor's oracle 


Sat / Stabci 
produces ip — Push{ip) — ip o t 
which is Grover's oracle {jo ^ 0) 


Differences 


Repeated calling of the quantum 
subroutine QRand((^) provides 
enough information to solve the 


Repeated calling of the quantum 
subroutine QRand(^) provides 
no information whatsoever about 


HSP if 


the HSP p 



10. Conclusions and Open Questions 

The arguments made in this paper suggest that Grover's and Shor's algorithms 
are more closely related quantum algorithms than one might at first expect. Al- 
though the standard non-abelian QHS algorithm on Sjv can not solve the Grover 
hidden subgroup problem, there still remains an intriguing question: 

Question. Is there some modification or extension of the stantard non-abelian 
QHS algorithm on the symmetric group Sat that actually solves Grover's hidden 
subgroup problem? 

An answer to the above question could lead to a greater insight into how to 
create new quantum algorithms. 

The methods of this paper can also be applied to Grover's algorithm for multiple 
marked label search. But can they also be applied to other extensions of Grover's 
algorithm such as those found in [2], 0? 
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